mpohoda.dmdagency.cz

Issued by AlpiroSSL RSA DV CA

About this certificate

This digital certificate with serial number 1c:9d:a5:b2:75:de:2c:33:8c:10:39:93:d4:60:ca:db was issued on by Alpiro s.r.o..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mpohoda.dmdagency.cz

Alpiro s.r.o.

Organization: Alpiro s.r.o.
Country: CZ

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:9d:a5:b2:75:de:2c:33:8c:10:39:93:d4:60:ca:db
Serial Number (int): 38036935225443478859711573372006615771
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: ab:4f:65:01:42:ff:5b:48:12:bf:91:af:f0:d6:74:77:70:0c:9a:4f
AuthorityKeyId: 13:9c:22:3a:a8:64:40:17:2c:b5:26:98:da:05:c9:35:25:2b:bf:5b

Fingerprint (sha1): d1:34:45:11:95:ee:87:08:0a:09:5e:83:2d:6b:ed:d0:06:95:67:b4
Fingerprint (sha256): c5:e0:f3:c1:4c:7a:5c:ce:7d:36:69:db:d0:82:2d:bf:5d:8d:8a:58:af:31:e0:11:de:ff:b0:ca:6c:3f:fe:57

Issuing Certificate URL: http://alpiro.crt.sectigo.com/AlpiroSSLRSADVCA.crt

Revocation information

OCSP Server: http://alpiro.ocsp.sectigo.com

Check the revocation status for certificate mpohoda.dmdagency.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mpohoda.dmdagency.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mpohoda.dmdagency.cz
www.mpohoda.dmdagency.cz

Other certificates including the domain name dmdagency.cz

(limited to 100 certificates)

Certificate

The complete raw certificate details for mpohoda.dmdagency.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZTTk2qOuFLCsvlyvGSS
SGw0L6uGDcCCmRNYf21vN2My+NH85Lo7PBlwRMq/NgvExS1XfVVdtmCJZfAwk+xd
TRppzSGwVBGNgBuYltbqhuoPG8dqOSZjerdvMxkKA/l4E3C2IJ6Saw1uKTuc862Q
Uacw5g2qM+0jgiYg/gjIOWYrPsey/EaL427IoFXJpKqsCUDc1Y5Bc+AbqOppBDzZ
2fcTgu1Gt9zoPOM39Uh8Pu7kQ2pmXWz6VT3ZUuhrFDUl4Cwn7gwxW5E90bH2AUIN
OCwrfqHnWNMQtHM4Hj7z615CpC7uySlRNJMLFB/oaaX+IjBswQsNqgC0FFh9GNlZ
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38036935225443478859711573372006615771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpiro s.r.o.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlpiroSSL RSA DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mpohoda.dmdagency.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22922522265546052415719296380363864800755792275905048301352795347079291145718533893596233890551988947928064596268175331908836766486174404318497551365246470861397281317555086435532694526285308359081639143170258216487132636976802493129858981896153860266791346770957110490211013893922047413354745055925025167991256813393727219104156766344566822752436542243666070010684846690159994727974850671961673795011547746636468603375111775617670788855214041654519693453130083648805340614945962866096580581228769878824773205836426544570522943223503560468278542908467045555005466309328222180641963246998044624142403695753062164027831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 139c223aa86440172cb52698da05c935252bbf5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab4f650142ff5b4812bf91aff0d67477700c9a4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.87
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://alpiro.crt.sectigo.com/AlpiroSSLRSADVCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://alpiro.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpohoda.dmdagency.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpohoda.dmdagency.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001f22f50366d22d71d6c232c7149927daf1766b049ddf3268bcacb2aa056cc79ce36ac53bc7adfc4c2ef4b0b40b7f512de0e4143b789d6f8c560bf204c8b01f8876be460fe89ddb14d904f0069f93a4d562197347aa77616004535cf55cf4dfaba7025a8f9eddfde0dc27169b78579f8cc1ac674917e4f4e170e539afc05f6456d9186d3aef93e87c35517aeb4a9f398fb3b731fadd5af1e24758f04257b6e681c7d1fc5ce41205398001469aa57934bc13c3607088aac26de443ca4b9001915b2fcfec19a78390f97ea76e7b40753de1f3fd1f056e77104d5d99bcabb6710675acaa4313b6fa9815442cf574b60245eca2bf9f614dc54b0cf0b9bbb967eeba1f826d8346e6f7bec322341af191d3d58a11b98fc7e485680c2afec3dc4b0cfa1a0d1262376ba7d043d60ddcba5978600296f7650929ea087644a47596cf5cc50264bd8410e983c9652392df99163287f90300acaf01a8af4030dc73e8a89afe60dc106f12303efa4fd3c9c4bc993f04b88c4551a151e31644c120fb03481f033d92aaeb3ce7d289ac81057c873a5a3ec1e94dea0bd6bda16fababf6eb15a8b39c2fdf221f846a341ddbd2b3bd0360b073a0b11f4249d4607f0bbbaf20db07ca7a4aa87f5e049b005605017bc916f6f74db49a967f8944f7012007cab5261f3a6bd91b7201a31bd3a00d3f7ad3c67faf4f97cff8987311e86320cd1ae01ccc9ac4